You click "sign in," type your password, and nothing happens. Or the site says your password is wrong, and you know you've used this account before. You just can't remember what you chose.
This happens to nearly everyone. The average person now manages 168 passwords across personal accounts, a number that has nearly doubled since 2020 (NordPass, 2024). Forgetting one is not a failure. It's just math.
This guide walks you through recovering access to any account, step by step, in everyday language. No technical experience needed.
Key Takeaways
- 51% of people reset a forgotten password at least once a month. You're in good company (Entrust, 2023).
- The "Forgot Password" link does the same thing whether you use it once a year or every week. There's no penalty for using it.
- If the reset email doesn't arrive, check your spam folder first before assuming something went wrong.
- Writing passwords in a notebook kept at home is a reasonable strategy. A password manager is even better.
Is It Normal to Forget Passwords This Often?
Completely. Fifty-one percent of people reset a forgotten password at least once a month, and 15 percent do so at least once a week (Entrust, 2023). Researchers at Munster Technological University found that older adults describe their main password challenge as "frustration with volume," and that this frustration is nearly universal among the adults they studied (arXiv, 2025).
The websites requiring passwords are not making it easier. Every service has slightly different rules: one wants a capital letter, another wants a symbol, a third locks you out after two wrong guesses. Keeping track of all of it would challenge anyone.
The good news: every major website has a way for you to get back in. It's called the password reset process, and it's designed to work even when you've completely forgotten what you set.
Something worth knowing: A 2025 survey found that 55% of people have simply abandoned an account or created a new one to avoid dealing with a password reset (Bitwarden, 2025). If that sounds familiar, this guide is for you.
Step 1: Find the "Forgot Password" Link
Every login page has one. It goes by several names depending on the site: "Forgot Password," "Trouble Signing In," "Reset Password," or "Can't Access Your Account." It's almost always near the password field or the sign-in button.
Here's where to look:
- On a computer: below the password box, or just below the "Sign In" button
- On a phone: same location, though the text may be smaller
- If you can't find it: look for a "Help" link, or search the site's name and the words "forgot password" in a new browser tab
Click the link. Don't type a new password yet. Just click it and follow what the site asks.
What happens next: The site will ask you to enter the email address or phone number connected to your account. Use the one you used when you created the account. This is usually your main email address.
Step 2: Check Your Email for the Reset Link
Once you've entered your email address and clicked the reset button, the site sends you an email. That email contains a link that lets you set a new password.
A few things to know before you panic:
It usually arrives within a few minutes. Sometimes it takes up to 10 minutes. Don't click the reset button multiple times. Each click generates a new link and can cancel the previous one.
Check your spam folder. Password reset emails frequently land there. Look for a folder called "Spam," "Junk," or "Junk Mail" in your email program. If the message is there, open it and click the link inside. It still works.
The link expires. Most reset links work for 15 to 60 minutes. If you come back to it hours later, you'll need to request a new one.
What if you don't know which email address you used? Try your most-used email address first. If that doesn't work, try any others you might have. Some sites also let you reset by phone number. Look for that option on the same page.
Step 3: Set Your New Password
When you click the link in the reset email, the site will take you to a page where you can create a new password. Here's how to make one you'll actually remember.
A good password has three qualities:
- It's long. Twelve characters or more is the standard recommendation from security experts. Length matters more than complexity.
- It's not something obvious. Avoid your name, your birthdate, or the word "password."
- It's different from passwords you use on other accounts.
One method that works well: use a phrase. Think of three or four ordinary words strung together, like morning-coffee-table-lamp or blue-chair-front-porch. This creates a long password that's easy to recall but hard to guess. You can add a number or punctuation mark if the site requires it.
Write it down immediately in a place you'll find it: a small notebook kept in a drawer at home, a piece of paper tucked inside a calendar, or wherever you keep important information. There's nothing wrong with writing down passwords. A notebook at home is far safer than using the same simple password everywhere.
Our finding: Researchers studying older adults' password habits found that many already use written records, and that this approach, while imperfect, provides better real-world protection than the alternative of reusing weak passwords across accounts (arXiv, 2025). The advice to "never write down a password" applies to sticky notes on monitors, not to private notebooks kept at home.
What If the Reset Email Never Arrives?
This is the most common place people get stuck. The reset button worked, you waited, and nothing showed up.
Work through these steps in order before assuming something is broken:
Check spam. This solves the problem most of the time. Look for a folder called Spam, Junk, or Bulk Mail in your email program.
Wait a full 10 minutes. Email servers can be slow. Set a timer and wait before trying again.
Search your inbox. Use the search bar in your email and type the name of the website. Sometimes the email is there but buried.
Try requesting it again. If 10 minutes have passed and nothing has arrived, go back to the site and click "Forgot Password" again. Make sure you're entering the email address correctly.
Try a different email address. If you have more than one email account, you may have registered with a different one.
Call the company directly. If none of this works, most companies have phone support. Call using a number from their official website (not from a search result, which can sometimes show fake numbers). Explain that you're not receiving the reset email.
How Do You Stop This from Happening Again?
The honest answer: you probably can't prevent it entirely. 168 passwords is too many for any person to reliably remember. But you can make it much less stressful.
Keep a password notebook. A small dedicated notebook works well. Write the site name, your email or username, and the password. Keep it in a safe place at home. Update it whenever you change a password.
Use the same email address for everything. This won't help you remember passwords, but it means you always know where to look for the reset email.
Consider a password manager. These are apps or programs that store all your passwords in one secure place. You only need to remember one password to open it. About 36% of U.S. adults use one, up from 34% the year before (Security.org, 2024). Options like Apple's built-in password storage, Google Password Manager (free, built into Chrome), Bitwarden (free), or 1Password are all reliable choices.
A password manager can sound complicated, but the basic version of it is simpler than it sounds: you log in to one place, and it fills in your passwords everywhere else. If you'd like help setting one up, a vetted tech advisor can walk you through it at whatever pace works for you. See how ClearGuide connects you with trusted local help.
Worth considering: 70% of people exposed in data breaches were found to be reusing passwords that had already been compromised in a previous breach (SpyCloud, 2025). Using unique passwords for each account is the single most effective thing you can do for your online security.
Frequently Asked Questions
Is it safe to use the "Forgot Password" link?
Yes. This is the official, intended way to recover access to your account. The link works by sending a temporary reset link to your registered email address. No personal information is exposed, and using it does not flag or penalize your account in any way. It's the same process the site expects you to use.
What if I no longer have access to the email address I used to sign up?
Most sites offer backup options: a text message to your phone number, answers to security questions, or a verification code through an authenticator app. Look for an option that says "Try another way" or "Use a different method." If none of those work, contacting the company's customer support by phone is the next step.
Can I use the same password for multiple accounts?
You can, but it creates real risk. If one site is breached and your password is exposed, anyone who gets that password can try it on your bank, your email, and anywhere else you've used it. Unique passwords for each account, combined with a notebook or password manager to keep track of them, is a much safer approach. See our guide to common online scams and how to protect yourself for more on staying safe online.
How do I know if a password reset email is real or a scam?
Real reset emails arrive only when you clicked "Forgot Password" yourself. If you receive a password reset email you did not request, do not click anything in it. Someone may have entered your email address by mistake, or it could be a phishing attempt. Go directly to the site by typing its address in a new browser tab and check if anything has changed. See our guide on how to tell if an email is fake for a full checklist.
Is writing down passwords safe?
A notebook kept at home is far safer than using a weak password or reusing the same password everywhere. The risk of someone physically breaking into your home to steal a password notebook is much lower than the risk of a website being hacked and exposing weak, reused passwords. Many security experts, including researchers who specifically study older adults' habits, support using written records as a practical and reasonable approach.
The Bottom Line
Forgetting a password is not a mistake. It's a predictable result of the internet asking you to manage too many accounts. The reset process exists precisely because this happens to everyone, constantly.
The steps are the same no matter which account you're trying to recover:
- Find the "Forgot Password" link near the sign-in button
- Enter the email address connected to your account
- Check your spam folder when the email arrives
- Create a new password and write it down somewhere safe
If you get stuck at any step, help is available. A trusted tech advisor can walk you through the process, help you set up a password notebook system that works for you, or introduce you to a password manager at whatever pace makes sense.
For more on staying safe online:
If you'd like one-on-one help with passwords or anything else on your device, ClearGuide can connect you with a trusted tech advisor who works in everyday language, at your pace.